There are debug statements in Foswiki::Users::LdapPasswdUser.pm, specifically in the checkPassword subroutine that should print out to the log also. I think. It seems that when Foswiki::LoginManager::TemplateLogin.pm calls checkPassword (and authentication fails), some other checkPassword subroutine is used since there is nothing in the log.